Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e3131322e302f32332d3234203d3e203137393935.roa
File:                     3130332e3135302e3131322e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          SN85/2KKG6dmItsloltaUmn4mUDeO4eHg1sf264VELs=
Subject key identifier:   1F:39:4D:F2:44:84:A9:55:03:D7:F6:0C:DF:62:0E:9B:7A:1C:22:2E
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5A744226E55CD5AC5532A7C05D802C2A45FED669
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e3131322e302f32332d3234203d3e203137393935.roa
Signing time:             Wed 27 Oct 2021 21:00:01 +0000
ROA not before:           Wed 27 Oct 2021 20:55:01 +0000
ROA not after:            Thu 27 Oct 2022 21:00:01 +0000
asID:                     17995
IP address blocks:        103.150.112.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:74:42:26:e5:5c:d5:ac:55:32:a7:c0:5d:80:2c:2a:45:fe:d6:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 27 20:55:01 2021 GMT
            Not After : Oct 27 21:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:eb:c0:f1:10:a7:7e:fe:6d:e0:7a:0e:e2:ea:
                    3a:cf:a1:e8:ff:97:d0:38:42:e3:58:92:19:a7:16:
                    b8:5e:7c:70:21:3a:43:3a:4a:8e:0f:ac:db:28:97:
                    71:b8:22:69:8f:e0:73:c6:1e:bd:ef:ab:d1:dc:5e:
                    b3:ff:dc:8b:4f:6a:54:7a:81:33:ed:13:c8:3a:78:
                    88:4c:01:e1:cc:45:16:b8:79:d7:c2:90:03:5d:97:
                    b8:60:81:cc:b4:b6:1b:b0:4c:e5:fe:b6:5f:55:6f:
                    13:9c:53:db:5e:6a:7b:5f:4a:f6:0d:a9:18:56:35:
                    bf:5a:dd:3e:e0:3e:5d:dc:74:40:e3:d3:fd:3b:a9:
                    b5:23:fb:4f:2f:6a:88:4a:3c:a7:a5:da:52:6e:30:
                    78:7b:e2:dd:c7:7b:08:1e:5c:91:62:75:69:32:a0:
                    dd:4a:bc:67:94:a3:11:e6:8f:f3:d2:c5:4c:0b:e3:
                    0d:82:49:ec:ed:83:ea:3d:b6:42:fa:ca:db:f1:5f:
                    7e:f9:bd:c2:5f:3f:81:33:c6:33:78:d0:a2:45:47:
                    fd:bf:1b:cf:8b:26:97:ba:b3:fd:24:37:e4:f7:15:
                    ac:bf:b2:1d:59:09:e4:b5:35:9a:3c:e2:83:56:65:
                    99:c1:99:8f:25:35:5b:ce:2c:37:53:4d:48:2d:3e:
                    1c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:39:4D:F2:44:84:A9:55:03:D7:F6:0C:DF:62:0E:9B:7A:1C:22:2E
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e3131322e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:cd:af:83:e5:7d:b1:80:c3:a3:a7:f7:d1:d3:00:d6:10:f1:
         b1:9d:e0:82:f0:c9:ee:0d:c9:c0:3d:e5:af:a0:2c:ad:66:87:
         67:54:2e:f4:a7:10:d9:4e:3a:64:35:b5:b4:57:94:d6:a2:67:
         2c:29:18:b8:87:95:69:f4:3f:12:e8:9e:4e:46:8a:a2:bd:67:
         88:05:f6:72:e6:2b:d7:a7:7c:ce:f2:a1:8f:10:98:64:18:19:
         2d:43:87:f4:73:ea:39:14:95:d3:d5:ba:f5:6f:53:f7:d4:21:
         b7:43:bc:6f:59:72:71:79:a8:be:4f:22:bd:f2:01:56:13:ca:
         0c:f4:36:dc:ab:73:0c:41:db:b5:fa:db:12:82:8f:f1:87:d9:
         3c:c9:d6:35:81:04:57:79:26:48:00:34:88:c5:a2:5f:01:74:
         0f:c2:3a:ac:1c:e6:17:70:57:97:d5:ae:32:74:64:ed:f3:39:
         11:91:4d:a4:4e:a8:f0:a8:08:89:f8:06:6b:cc:98:bb:a2:d6:
         db:df:2e:50:d0:eb:f7:3b:0e:a4:9a:66:23:ae:e1:ac:17:fa:
         90:0d:64:cc:53:4b:bf:be:8c:03:74:1e:f1:e3:8b:4d:c3:9b:
         0c:c9:ab:d2:13:e8:c0:4d:22:7f:e2:ce:37:20:a1:7c:d5:98:
         3f:72:b6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----